Warning: Permanently added '[localhost]:29959' (ECDSA) to the list of known hosts. 2022/10/01 12:14:10 fuzzer started 2022/10/01 12:14:10 dialing manager at localhost:35095 syzkaller login: [ 44.523619] cgroup: Unknown subsys name 'net' [ 44.613492] cgroup: Unknown subsys name 'rlimit' 2022/10/01 12:14:24 syscalls: 2215 2022/10/01 12:14:24 code coverage: enabled 2022/10/01 12:14:24 comparison tracing: enabled 2022/10/01 12:14:24 extra coverage: enabled 2022/10/01 12:14:24 setuid sandbox: enabled 2022/10/01 12:14:24 namespace sandbox: enabled 2022/10/01 12:14:24 Android sandbox: enabled 2022/10/01 12:14:24 fault injection: enabled 2022/10/01 12:14:24 leak checking: enabled 2022/10/01 12:14:24 net packet injection: enabled 2022/10/01 12:14:24 net device setup: enabled 2022/10/01 12:14:24 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/01 12:14:24 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/01 12:14:24 USB emulation: enabled 2022/10/01 12:14:24 hci packet injection: enabled 2022/10/01 12:14:24 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/01 12:14:24 802.15.4 emulation: enabled 2022/10/01 12:14:24 fetching corpus: 50, signal 29332/31066 (executing program) 2022/10/01 12:14:24 fetching corpus: 100, signal 45682/48858 (executing program) 2022/10/01 12:14:24 fetching corpus: 150, signal 51404/56016 (executing program) 2022/10/01 12:14:24 fetching corpus: 200, signal 58707/64627 (executing program) 2022/10/01 12:14:24 fetching corpus: 250, signal 63633/70781 (executing program) 2022/10/01 12:14:24 fetching corpus: 300, signal 67482/75849 (executing program) 2022/10/01 12:14:24 fetching corpus: 350, signal 71207/80787 (executing program) 2022/10/01 12:14:25 fetching corpus: 400, signal 74782/85462 (executing program) 2022/10/01 12:14:25 fetching corpus: 450, signal 77087/88917 (executing program) 2022/10/01 12:14:25 fetching corpus: 500, signal 84281/96791 (executing program) 2022/10/01 12:14:25 fetching corpus: 550, signal 87460/100939 (executing program) 2022/10/01 12:14:25 fetching corpus: 600, signal 90040/104495 (executing program) 2022/10/01 12:14:25 fetching corpus: 650, signal 93328/108632 (executing program) 2022/10/01 12:14:25 fetching corpus: 700, signal 95901/112047 (executing program) 2022/10/01 12:14:25 fetching corpus: 750, signal 98912/115784 (executing program) 2022/10/01 12:14:26 fetching corpus: 800, signal 102725/120204 (executing program) 2022/10/01 12:14:26 fetching corpus: 850, signal 104295/122613 (executing program) 2022/10/01 12:14:26 fetching corpus: 900, signal 107408/126313 (executing program) 2022/10/01 12:14:26 fetching corpus: 950, signal 109397/129076 (executing program) 2022/10/01 12:14:26 fetching corpus: 1000, signal 111669/131990 (executing program) 2022/10/01 12:14:26 fetching corpus: 1050, signal 114078/134940 (executing program) 2022/10/01 12:14:26 fetching corpus: 1100, signal 116573/137994 (executing program) 2022/10/01 12:14:26 fetching corpus: 1150, signal 117691/139885 (executing program) 2022/10/01 12:14:27 fetching corpus: 1200, signal 119592/142349 (executing program) 2022/10/01 12:14:27 fetching corpus: 1250, signal 121013/144408 (executing program) 2022/10/01 12:14:27 fetching corpus: 1300, signal 122874/146782 (executing program) 2022/10/01 12:14:27 fetching corpus: 1350, signal 124084/148645 (executing program) 2022/10/01 12:14:27 fetching corpus: 1400, signal 125750/150824 (executing program) 2022/10/01 12:14:27 fetching corpus: 1450, signal 127730/153223 (executing program) 2022/10/01 12:14:27 fetching corpus: 1500, signal 129297/155261 (executing program) 2022/10/01 12:14:27 fetching corpus: 1550, signal 132253/158321 (executing program) 2022/10/01 12:14:28 fetching corpus: 1600, signal 134917/161034 (executing program) 2022/10/01 12:14:28 fetching corpus: 1650, signal 136119/162716 (executing program) 2022/10/01 12:14:28 fetching corpus: 1700, signal 137824/164735 (executing program) 2022/10/01 12:14:28 fetching corpus: 1750, signal 138972/166379 (executing program) 2022/10/01 12:14:28 fetching corpus: 1800, signal 139862/167764 (executing program) 2022/10/01 12:14:28 fetching corpus: 1850, signal 141021/169321 (executing program) 2022/10/01 12:14:28 fetching corpus: 1900, signal 142569/171190 (executing program) 2022/10/01 12:14:28 fetching corpus: 1950, signal 143833/172790 (executing program) 2022/10/01 12:14:28 fetching corpus: 2000, signal 145706/174745 (executing program) 2022/10/01 12:14:29 fetching corpus: 2050, signal 146350/175880 (executing program) 2022/10/01 12:14:29 fetching corpus: 2100, signal 147262/177180 (executing program) 2022/10/01 12:14:29 fetching corpus: 2150, signal 148303/178564 (executing program) 2022/10/01 12:14:29 fetching corpus: 2200, signal 149867/180283 (executing program) 2022/10/01 12:14:29 fetching corpus: 2250, signal 151112/181730 (executing program) 2022/10/01 12:14:29 fetching corpus: 2300, signal 152089/182992 (executing program) 2022/10/01 12:14:29 fetching corpus: 2350, signal 152948/184143 (executing program) 2022/10/01 12:14:29 fetching corpus: 2400, signal 154496/185716 (executing program) 2022/10/01 12:14:30 fetching corpus: 2450, signal 155376/186850 (executing program) 2022/10/01 12:14:30 fetching corpus: 2500, signal 156286/188029 (executing program) 2022/10/01 12:14:30 fetching corpus: 2550, signal 156846/188947 (executing program) 2022/10/01 12:14:30 fetching corpus: 2600, signal 158070/190224 (executing program) 2022/10/01 12:14:30 fetching corpus: 2650, signal 158999/191356 (executing program) 2022/10/01 12:14:30 fetching corpus: 2700, signal 159528/192244 (executing program) 2022/10/01 12:14:30 fetching corpus: 2750, signal 160596/193383 (executing program) 2022/10/01 12:14:30 fetching corpus: 2800, signal 161631/194555 (executing program) 2022/10/01 12:14:30 fetching corpus: 2850, signal 162306/195486 (executing program) 2022/10/01 12:14:30 fetching corpus: 2900, signal 163123/196505 (executing program) 2022/10/01 12:14:31 fetching corpus: 2950, signal 163991/197501 (executing program) 2022/10/01 12:14:31 fetching corpus: 3000, signal 165585/198827 (executing program) 2022/10/01 12:14:31 fetching corpus: 3050, signal 167307/200196 (executing program) 2022/10/01 12:14:31 fetching corpus: 3100, signal 168793/201450 (executing program) 2022/10/01 12:14:31 fetching corpus: 3150, signal 169518/202279 (executing program) 2022/10/01 12:14:31 fetching corpus: 3200, signal 170220/203092 (executing program) 2022/10/01 12:14:31 fetching corpus: 3250, signal 170617/203768 (executing program) 2022/10/01 12:14:31 fetching corpus: 3300, signal 171282/204565 (executing program) 2022/10/01 12:14:32 fetching corpus: 3350, signal 172247/205470 (executing program) 2022/10/01 12:14:32 fetching corpus: 3400, signal 172985/206272 (executing program) 2022/10/01 12:14:32 fetching corpus: 3450, signal 173479/206914 (executing program) 2022/10/01 12:14:32 fetching corpus: 3500, signal 174436/207793 (executing program) 2022/10/01 12:14:32 fetching corpus: 3550, signal 175125/208564 (executing program) 2022/10/01 12:14:32 fetching corpus: 3600, signal 175677/209256 (executing program) 2022/10/01 12:14:32 fetching corpus: 3650, signal 176348/209951 (executing program) 2022/10/01 12:14:32 fetching corpus: 3700, signal 176947/210610 (executing program) 2022/10/01 12:14:33 fetching corpus: 3750, signal 178276/211525 (executing program) 2022/10/01 12:14:33 fetching corpus: 3800, signal 178910/212203 (executing program) 2022/10/01 12:14:33 fetching corpus: 3850, signal 180115/213068 (executing program) 2022/10/01 12:14:33 fetching corpus: 3900, signal 180774/213703 (executing program) 2022/10/01 12:14:33 fetching corpus: 3950, signal 181461/214377 (executing program) 2022/10/01 12:14:33 fetching corpus: 4000, signal 182034/214975 (executing program) 2022/10/01 12:14:33 fetching corpus: 4050, signal 182495/215546 (executing program) 2022/10/01 12:14:33 fetching corpus: 4100, signal 183080/216119 (executing program) 2022/10/01 12:14:34 fetching corpus: 4150, signal 184131/216792 (executing program) 2022/10/01 12:14:34 fetching corpus: 4200, signal 185383/217575 (executing program) 2022/10/01 12:14:34 fetching corpus: 4250, signal 186803/218312 (executing program) 2022/10/01 12:14:34 fetching corpus: 4300, signal 187645/218872 (executing program) 2022/10/01 12:14:34 fetching corpus: 4350, signal 188326/219421 (executing program) 2022/10/01 12:14:34 fetching corpus: 4400, signal 189425/220004 (executing program) 2022/10/01 12:14:34 fetching corpus: 4450, signal 189832/220425 (executing program) 2022/10/01 12:14:34 fetching corpus: 4500, signal 190429/220871 (executing program) 2022/10/01 12:14:35 fetching corpus: 4550, signal 190759/221319 (executing program) 2022/10/01 12:14:35 fetching corpus: 4600, signal 191277/221849 (executing program) 2022/10/01 12:14:35 fetching corpus: 4650, signal 191824/222378 (executing program) 2022/10/01 12:14:35 fetching corpus: 4700, signal 192582/223001 (executing program) 2022/10/01 12:14:35 fetching corpus: 4750, signal 193060/223424 (executing program) 2022/10/01 12:14:35 fetching corpus: 4800, signal 193486/223844 (executing program) 2022/10/01 12:14:35 fetching corpus: 4850, signal 194406/224302 (executing program) 2022/10/01 12:14:35 fetching corpus: 4870, signal 194679/224652 (executing program) 2022/10/01 12:14:35 fetching corpus: 4870, signal 194679/224963 (executing program) 2022/10/01 12:14:35 fetching corpus: 4870, signal 194679/225247 (executing program) 2022/10/01 12:14:35 fetching corpus: 4870, signal 194679/225590 (executing program) 2022/10/01 12:14:35 fetching corpus: 4870, signal 194679/225908 (executing program) 2022/10/01 12:14:35 fetching corpus: 4870, signal 194679/226192 (executing program) 2022/10/01 12:14:35 fetching corpus: 4870, signal 194679/226479 (executing program) 2022/10/01 12:14:35 fetching corpus: 4870, signal 194679/226823 (executing program) 2022/10/01 12:14:35 fetching corpus: 4870, signal 194679/227142 (executing program) 2022/10/01 12:14:35 fetching corpus: 4870, signal 194679/227447 (executing program) 2022/10/01 12:14:35 fetching corpus: 4870, signal 194679/227763 (executing program) 2022/10/01 12:14:35 fetching corpus: 4870, signal 194679/228089 (executing program) 2022/10/01 12:14:35 fetching corpus: 4870, signal 194679/228391 (executing program) 2022/10/01 12:14:35 fetching corpus: 4870, signal 194679/228652 (executing program) 2022/10/01 12:14:35 fetching corpus: 4870, signal 194679/228951 (executing program) 2022/10/01 12:14:35 fetching corpus: 4870, signal 194679/229170 (executing program) 2022/10/01 12:14:35 fetching corpus: 4870, signal 194679/229170 (executing program) 2022/10/01 12:14:38 starting 8 fuzzer processes 12:14:38 executing program 0: ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000000)) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001000), 0x401, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000001040)) r1 = syz_open_dev$rtc(&(0x7f0000001080), 0x8f, 0x181400) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) ftruncate(r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000010c0)='oom_score\x00') ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000001100)={0x2, 0x1f, 0x8, 0x1b, 0x9, 0x100, 0x6, 0xf0}) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000001140)=0x9) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000011c0)={0x3, &(0x7f0000001180)=[{0x6, 0xcd, 0x20, 0x743a}, {0x1000, 0x9, 0x6}, {0x8, 0x7f, 0x75, 0x7}]}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000001200)) fsetxattr$security_capability(r0, &(0x7f0000001240), &(0x7f0000001280)=@v1={0x1000000, [{0x8, 0x3}]}, 0xc, 0x6) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000012c0)) ioctl$CDROMRESET(r0, 0x5312) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000001300)={{0x1, 0x1, 0x18, r3, {0xa002, 0x7}}, './file0\x00'}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001380), r0) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, r5, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x935}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8015) poll(&(0x7f0000001780)=[{0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x464a}, {0xffffffffffffffff, 0x5000}, {r2, 0x4010}], 0x4, 0x0) 12:14:38 executing program 1: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010102}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4811}, 0x8000) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r0, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1387}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0xca40088bfad652e5) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/43, 0x2b}, {&(0x7f0000000300)=""/227, 0xe3}, {&(0x7f0000000400)=""/50, 0x32}], 0x3, &(0x7f0000000480)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x150}, 0x40010000) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, r0, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x29}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x40000) r8 = syz_open_dev$vcsa(&(0x7f0000000740), 0x81, 0x94000) sendmsg$NL80211_CMD_SET_BSS(r8, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x40, r0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x148, 0x6f}}}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x2}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xffff}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x200000c0) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, r9, 0x8, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x6008c) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000f00)={{{@in6=@private2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@private2}}, &(0x7f0000001000)=0xe8) syz_mount_image$vfat(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', 0x8, 0x4, &(0x7f0000000e80)=[{&(0x7f0000000b40)="e7678362b17ddf1cc33ce333e9552f797aafa7b5b94c01642257f602844aa47f745693ec3ca52f46ea37abb3b670250a490e14182329dba6ac5fba1abae8e7b5e89927ce6d5938158493f1613b05aa84e10a486e9ee87045fa7b61a944f491c15887565d1de8cc3d2e1d2c1960b4a7b04926dc37f50469c912ca48621e4c4a77ed33458085e89df17e7dcf7ce063ef54e6a5d0cc9620c9c67bc20f0d5e9706731afe1da624b51508d282316ca6254b4b7a8cf4fcddc47da556decb7aba1914617b532a40e01aa8a5c88d7ec5c3d8ea237c37d28a41ef2e2d8285c68d", 0xdc, 0xac}, {&(0x7f0000000c40)="49f6730b8143e8aa818f06031324c16c12273b21ea5eba0c59c267d62566d9636b49f888c26ec50e727d94a5bd0b1dac899f6a703c1367b2331644f6b8defee9c3bac50cc35b0a54031bdc4180038a905df253ce69fd12", 0x57, 0x1}, {&(0x7f0000000cc0)="cf3333f5a99880e4a7b5e4e480b6ac0dedb9694e1018ac5ce65fcccf55f75e701585efef4bcd15eba502862477d9c39b5636cc7c5533219fa3d8e4fef553dce5eb5d8084bdd307d408193db9f1babe09f9217ee2af479954f0af916ed8009683231041f929d1ec75bf13f8541b65b6d02657c458423c87035018b43f1c725151ae8e4e4713d68a586d455192", 0x8c, 0x2000000000000}, {&(0x7f0000000d80)="59345372a413176966f1412b4b5e9cb0816d04bb97ac032344ffa81a5a349e67c162c735207b00199c76530b1cb64155bb953cc60bcb8ecd704e5e77706a85c41ebd578fe26c2c5cd91d6aefe804bbd062d17bd35db88b2742900c50ace9fc6f5ed9fab31bec52d696a03190e4e652e0f5c5700fa2e38b4de6c4415842a7383ff680c0327aacc1cbe7390ebf6b9886114cfbdf463c8f4549059e132962875312a3c41870f0a60698ce6db0d7fb6613668ddfd45613feef470367f509153826311c8e228ef001f3a28ae18d7753", 0xcd, 0xe546}], 0x0, &(0x7f0000001040)={[{@shortname_lower}, {@shortname_win95}, {@utf8no}, {@nonumtail}, {@shortname_lower}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}], [{@euid_lt={'euid<', r10}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@smackfshat}, {@fowner_gt={'fowner>', r5}}]}) sendmsg$NFT_MSG_GETFLOWTABLE(r7, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x48, 0x17, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20010001}, 0x0) openat(r2, &(0x7f0000001280)='./file0\x00', 0x18480, 0x5) chdir(&(0x7f00000012c0)='./file0\x00') r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), r3) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000001580)={&(0x7f0000001300), 0xc, &(0x7f0000001540)={&(0x7f0000001380)={0x188, r11, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x80}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0xe4, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xffffffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2b4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xc8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xf4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xda}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x101}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3f}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5f}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7fff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}]}]}, @NL80211_ATTR_REG_RULES={0x68, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3ff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x800}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x188}, 0x1, 0x0, 0x0, 0x4}, 0x0) creat(&(0x7f00000015c0)='./file1\x00', 0x122) socketpair(0x29, 0x5, 0x2, &(0x7f0000001600)) socketpair(0x27, 0x5, 0x80000001, &(0x7f0000001640)) 12:14:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xb17a}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x10000}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xebb}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40008200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6fae}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x90) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000540)={&(0x7f0000000380), 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xf4, r2, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0xa}}}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1}}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x1}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x6}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x4, 0x7}}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xa4, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x24, 0x1, @random="36d0efa6001fda99d12444d138ff9cc8723d4d81a8caa0b4e74ab5e12428d25c"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x7}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x6}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x9f1}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x401}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_6GHZ={0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x40}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xffffffff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x6fc}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7f}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x5}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4844}, 0x845) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004011}, 0x20040840) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000780)={&(0x7f00000006c0), 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2b}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004801}, 0x40080) r3 = signalfd4(r0, &(0x7f00000007c0)={[0x8]}, 0x8, 0x800) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000840), 0x48900, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, r2, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1c}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x34}}, 0x20000010) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r4, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x55}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, 0x0, 0x10, 0x1f, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000c80)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000d80)=0xe8) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000dc0), 0x80000, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000ec0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x58, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000040}, 0x840) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f40)={0xc0, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffe0}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x800}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8c6}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x20}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x20004101) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000010c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x28, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x30040080}, 0x800) 12:14:38 executing program 3: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000000)={{{@in=@loopback, @in=@initdev}}, {{}, 0x0, @in=@dev}}, &(0x7f0000000100)=0xe8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x57}, @val={0x8, 0x3, r2}, @void}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20040851) syncfs(r0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f00000004c0)={'broute\x00', 0x0, 0x3, 0x55, [0x80000000, 0x2, 0x9, 0x400, 0x0, 0xfc81], 0x7, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000440)=""/85}, &(0x7f0000000540)=0x78) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000580)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) getsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f00000005c0), 0x2) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000740)={'nat\x00', 0x0, 0x3, 0xc8, [0xfff, 0x1ff, 0x1, 0x3, 0x8, 0x3f], 0x1, &(0x7f0000000600)=[{}], &(0x7f0000000640)=""/200}, &(0x7f00000007c0)=0x78) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000bc0)=@filter={'filter\x00', 0xe, 0x2, 0x344, [0x0, 0x20000840, 0x20000b24, 0x20000b54], 0x0, &(0x7f0000000800), &(0x7f0000000840)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x3, 0x4, 0x22eb, 'vlan1\x00', 'veth1\x00', 'bond_slave_0\x00', '\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], @multicast, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0xbe, 0xbe, 0x10e, [@ipvs={{'ipvs\x00', 0x0, 0x28}, {{@ipv6=@local, [0xffffff00, 0x800000ff, 0xff, 0xff000000], 0x4e24, 0x1d, 0x7, 0x4e20, 0x10, 0x10}}}], [], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x78, {0x4}}}}}, {0x5, 0x10, 0x18, 'veth0_macvtap\x00', 'wg2\x00', 'wg2\x00', 'veth0_to_batadv\x00', @random="b4aac58f2ffe", [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @empty, [0xff, 0x0, 0x0, 0xff], 0xde, 0x156, 0x1a6, [@physdev={{'physdev\x00', 0x0, 0x48}, {{'vxcan1\x00', {}, 'bond0\x00', {}, 0x6, 0xe}}}], [@common=@STANDARD={'\x00', 0x8, {0x4}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x7f, 0x9c, {0x20}}}}], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x1f25, {0x20}}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x3bc) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000cc0)={0x1, 0x5b, 0x47, &(0x7f0000000c40)=""/71}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000d00)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000d40)=0x8, 0x4) accept$inet(r3, &(0x7f0000000d80)={0x2, 0x0, @dev}, &(0x7f0000000dc0)=0x10) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000f00)={'filter\x00', 0x0, 0x3, 0xb2, [0x800, 0x8, 0xa601, 0x100, 0x1f, 0x2], 0x2, &(0x7f0000000e00)=[{}, {}], &(0x7f0000000e40)=""/178}, &(0x7f0000000f80)=0x78) r6 = syz_open_procfs(0x0, &(0x7f0000000fc0)='limits\x00') ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r6, 0x5000943f, &(0x7f0000001080)={{}, 0x0, 0x0, @inherit={0x60, &(0x7f0000001000)={0x0, 0x3, 0x204faf01, 0x1, {0x2, 0x5, 0x5, 0xfffffffffffffcea, 0x7}, [0x0, 0x7, 0xdbe9]}}, @subvolid}) 12:14:38 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x10c, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x50, 0x9}}}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xa0, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0xffffffc0}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x8124}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7fffffff}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x790a}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x6}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x17}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x9}, @NL80211_BAND_2GHZ={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x3}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x20c}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x24, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x9}, {0x8, 0x0, 0xf01}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0x2}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x80}]}, 0x10c}, 0x1, 0x0, 0x0, 0x44040}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x0, 0x31}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xc8e}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x8850}, 0x4040010) socketpair(0x1f, 0xa, 0x101, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x70b, 0x47}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20010}, 0x4000000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = io_uring_setup(0x6d43, &(0x7f0000000480)={0x0, 0xdae3, 0x20, 0x2, 0x3aa}) r4 = syz_io_uring_setup(0x3754, &(0x7f0000000500)={0x0, 0xd25b, 0x4, 0x2, 0x184, 0x0, r3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f00000008c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000640)={0x20c, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x68b8}, {0x6, 0x11, 0x200}, {0x8, 0x15, 0x80000000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6}, {0x8, 0x15, 0x81}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0x101}, {0x8, 0x15, 0x7ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x8}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6}, {0x8, 0x15, 0x80000000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x54}, {0x6, 0x11, 0xf0}, {0x8, 0x15, 0x100}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x61}, {0x8, 0x15, 0xffffffff}}]}, 0x20c}}, 0x4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000940)=r5, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00'}) sendmsg$NL80211_CMD_DEL_STATION(r5, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x3c, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x64}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r0}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x14) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r4, 0xf502, 0x0) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000ac0), &(0x7f0000000b00)={'U+', 0x4}, 0x16, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000bc0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x28, r6, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000cc0)={0x0, 0x1ff, "0a7ee3", 0x2, 0x3}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000d80)={0x15c, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xc4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "cf3ed462a97303857bcf42e83d84562dc6dc3372"}}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "87f7a0fc910588c63f5d73ca82ab4373efdd25341cee3c27ff58f73314"}}, @TIPC_NLA_NODE_ID={0x31, 0x3, "de7cfd414b36909eef009e6f07a8bd634d6ee77ea93cff33687c0ecf21b1d43fdc597389c1dbe19bd59280d67b"}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x62f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa2}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}]}]}, 0x15c}}, 0x4040810) [ 72.297054] audit: type=1400 audit(1664626478.810:6): avc: denied { execmem } for pid=286 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:14:38 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0xa8, 0x400000) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffff, r0, 0x8}) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000000080)={0x3, 0x2, 0x3}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x3) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x601, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) r3 = io_uring_setup(0x3fcc, &(0x7f00000001c0)={0x0, 0x1843, 0x1, 0x1, 0x22b, 0x0, r2}) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000240)=@ccm_128={{0x304}, "0a92618babf9c1f4", "ad65a9201c9e53730605b9a8ee4807a2", "834a0a10", "529595cea2cb5551"}, 0x28) recvmsg$unix(r2, &(0x7f0000000680)={&(0x7f0000000280), 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/195, 0xc3}, {&(0x7f0000000400)=""/233, 0xe9}, {&(0x7f0000000500)=""/156, 0x9c}], 0x3, &(0x7f0000000600)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x80}, 0x6002) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r8, 0xc0189378, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r1, {r7}}, './file0\x00'}) ioctl$HIDIOCGFIELDINFO(r10, 0xc038480a, &(0x7f0000000700)={0x2, 0x102, 0x5, 0x9a, 0x9, 0x8, 0x3ff, 0x2, 0x81, 0x81, 0x7, 0x2, 0xc46, 0x26e9bde3}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000740)={{0x1, 0x1, 0x18, r0}, './file0/file0\x00'}) ioctl$FIBMAP(r11, 0x1, &(0x7f0000000780)=0x1) r12 = syz_mount_image$nfs4(&(0x7f00000007c0), &(0x7f0000000800)='./file0\x00', 0x2, 0x1, &(0x7f0000000900)=[{&(0x7f0000000840)="0015874be7430920f2e01c288c74d4e1695653ae22b24c80e302a1f70e3e9b32374fcd8703f674e206809ddd7320743627a84898171cf3d745110474f0648f0460b3ed51a0cce3a4cf96b2de3a635642fbc0d9e1a622620bfc4ab3f21bdde04f83dcf3c9007fffb988440c5a92e2457feb0a44091d3e09ae1d9d13c956ce1e75ab65edfcbf02089ee7a952a9", 0x8c, 0x101}], 0x8010, &(0x7f0000000940)={[{'(/)\\'}, {}, {'\''}, {}], [{@uid_gt={'uid>', r6}}, {@fowner_lt={'fowner<', r6}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@context={'context', 0x3d, 'root'}}, {@uid_gt={'uid>', r9}}, {@smackfsroot={'smackfsroot', 0x3d, 'trusted.overlay.origin\x00'}}, {@seclabel}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@dont_measure}, {@dont_appraise}]}) r13 = syz_open_dev$hiddev(&(0x7f0000000a40), 0x34, 0x48080) clock_gettime(0x0, &(0x7f0000000b00)={0x0, 0x0}) ppoll(&(0x7f0000000a80)=[{r0, 0x100}, {r10, 0x5481}, {r12, 0x2}, {r11, 0x4100}, {r2, 0x8020}, {r3, 0x10}, {r8, 0x5080}, {r13, 0x2}, {r4, 0x601}, {r4, 0x128}], 0xa, &(0x7f0000000b40)={r14, r15+10000000}, &(0x7f0000000b80), 0x8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/tty/drivers\x00', 0x0, 0x0) lgetxattr(&(0x7f0000000c00)='./file0/file0\x00', &(0x7f0000000c40)=@known='com.apple.FinderInfo\x00', &(0x7f0000000c80)=""/135, 0x87) signalfd(r11, &(0x7f0000000d40)={[0x20]}, 0x8) 12:14:38 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x230401, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x10000}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x60f}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x81}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}]}, 0x8c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) read(r2, &(0x7f0000000200)=""/104, 0x68) r3 = fsmount(r1, 0x0, 0x6) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000280)) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f00000002c0)={0x1, 0x0, 0x2}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0xd, 0x1, '#f[\\)&#.\x00'}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, '/dev/vcsu\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044080}, 0x80) sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048000}, 0x8010) creat(&(0x7f0000000540)='./file0\x00', 0x100) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000580)=0x2, 0x4) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000600), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000851}, 0x4000000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000040) process_mrelease(0xffffffffffffffff, 0x0) 12:14:38 executing program 7: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r1, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x29}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x89}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000081}, 0xc000) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'caif0\x00'}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x63}) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x40080, 0x0) close_range(r0, r2, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000001340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001300)={&(0x7f0000000280)={0x1044, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x40, 0x7e}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffff}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x81}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "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"}]}, 0x1044}, 0x1, 0x0, 0x0, 0x24000810}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000001400)={'syztnl1\x00', &(0x7f0000001380)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0xff, 0x2, 0x0, @mcast1, @mcast2, 0x8, 0x7, 0x6, 0x4800000}}) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x60, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffffffc0, 0x6f}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10001}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19d}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x640a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4) pidfd_send_signal(0xffffffffffffffff, 0x25, &(0x7f0000001580)={0x39, 0x1ff, 0x9}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) write(r2, &(0x7f0000001600)="e9c973dfc6fd72dc00cd4cf0799b16a9d62369bd3dbd8de1a894f67aa789aac1e3357fef4f51b49b40e3fc39238f75e7f153308ad4af30ce201b07bc0228864852b1de6dccfe716c60e3241dd8fa7cce13a0c0e333d7e7c80a5a1d25607e124e5d8a9eb860e54c4d512570453c81318d5b01c448edcfedc5dd2e526b63990de2d26b5cf7633f15d45a389b6619a3f9474a5f254f6d3f17cd41e3c86cfbcefebeb94ff204800c6226f910efd16cb72efdc34baf655928b84643933e4f8b6308", 0xbf) r3 = syz_open_dev$vcsu(&(0x7f00000016c0), 0x8d, 0xc0000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f00000019c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x12000040}, 0xc, &(0x7f0000001980)={&(0x7f0000001780)={0x1f0, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8}}}}, [@NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x8c, 0x3, 0x5, 0x0, {0x7d50, 0x3f, 0x0, 0x81, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x1, 0x0, 0x6}}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x70, 0x115, "d80918ce59ba27d95ea7ee305e165acc39772c878791f9a17ce7fb9b0a5e156f8aa466d437a09c3fb1bc01b237ca72448abf2ab259c1e2be21d0265260ca5882f6b0ad796c501f9eb4e88cb70494c9fef09aec279189d503a31d2d4ef04e1aeed5cccbddb0a3c4e2856ee9d9"}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac0c, 0xfac04, 0xfac0b]}, @NL80211_ATTR_AKM_SUITES={0xc, 0x4c, [0xfac12, 0xfac14]}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}]]}, 0x1f0}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004010}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x68, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x10}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}]}, 0x68}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x24, 0x6, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80010}, 0x91) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000002700)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) [ 73.616209] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.617795] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.620675] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.624003] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.625898] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.628477] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.632902] Bluetooth: hci0: HCI_REQ-0x0c1a [ 73.683406] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.685490] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.688884] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 73.690668] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 73.694030] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 73.696555] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 73.700158] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.701629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.703096] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 73.707359] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 73.708852] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 73.711175] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 73.712308] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 73.713286] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.714243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.715858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.716846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 73.718163] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.723724] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 73.725293] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 73.727559] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.730336] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 73.731540] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.733428] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 73.734609] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.735655] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.737049] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 73.738107] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.742389] Bluetooth: hci6: HCI_REQ-0x0c1a [ 73.744271] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.745460] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.754475] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.755584] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.758527] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 73.761495] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.762635] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.765145] Bluetooth: hci5: HCI_REQ-0x0c1a [ 73.765707] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 73.767894] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 73.768850] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 73.770405] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.773221] Bluetooth: hci2: HCI_REQ-0x0c1a [ 73.773755] Bluetooth: hci7: HCI_REQ-0x0c1a [ 73.781685] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.786043] Bluetooth: hci1: HCI_REQ-0x0c1a [ 73.786789] Bluetooth: hci4: HCI_REQ-0x0c1a [ 73.811694] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.827283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.833873] Bluetooth: hci3: HCI_REQ-0x0c1a [ 75.704423] Bluetooth: hci0: command 0x0409 tx timeout [ 75.767219] Bluetooth: hci6: command 0x0409 tx timeout [ 75.831027] Bluetooth: hci1: command 0x0409 tx timeout [ 75.831618] Bluetooth: hci7: command 0x0409 tx timeout [ 75.832139] Bluetooth: hci2: command 0x0409 tx timeout [ 75.832628] Bluetooth: hci5: command 0x0409 tx timeout [ 75.833995] Bluetooth: hci4: command 0x0409 tx timeout [ 75.895984] Bluetooth: hci3: command 0x0409 tx timeout [ 77.751979] Bluetooth: hci0: command 0x041b tx timeout [ 77.815957] Bluetooth: hci6: command 0x041b tx timeout [ 77.880002] Bluetooth: hci4: command 0x041b tx timeout [ 77.880437] Bluetooth: hci5: command 0x041b tx timeout [ 77.880836] Bluetooth: hci2: command 0x041b tx timeout [ 77.881347] Bluetooth: hci7: command 0x041b tx timeout [ 77.881745] Bluetooth: hci1: command 0x041b tx timeout [ 77.944099] Bluetooth: hci3: command 0x041b tx timeout [ 79.800017] Bluetooth: hci0: command 0x040f tx timeout [ 79.864003] Bluetooth: hci6: command 0x040f tx timeout [ 79.928037] Bluetooth: hci1: command 0x040f tx timeout [ 79.928522] Bluetooth: hci7: command 0x040f tx timeout [ 79.928973] Bluetooth: hci2: command 0x040f tx timeout [ 79.929388] Bluetooth: hci5: command 0x040f tx timeout [ 79.929810] Bluetooth: hci4: command 0x040f tx timeout [ 79.991972] Bluetooth: hci3: command 0x040f tx timeout [ 81.847971] Bluetooth: hci0: command 0x0419 tx timeout [ 81.911962] Bluetooth: hci6: command 0x0419 tx timeout [ 81.976047] Bluetooth: hci4: command 0x0419 tx timeout [ 81.976466] Bluetooth: hci5: command 0x0419 tx timeout [ 81.976876] Bluetooth: hci2: command 0x0419 tx timeout [ 81.977292] Bluetooth: hci7: command 0x0419 tx timeout [ 81.977717] Bluetooth: hci1: command 0x0419 tx timeout [ 82.038974] Bluetooth: hci3: command 0x0419 tx timeout 12:15:35 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0xfffffffe}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xc, 0x1, 0xf9, 0x7f, 0x0, 0x1ff, 0x58200, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000340), 0x3}, 0x1, 0x0, 0x9, 0x3, 0x6, 0x800, 0x2, 0x0, 0x7, 0x0, 0x401}, 0x0, 0xa, r0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000200)={{0x2}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000440)="af98e2d926f1da31eaae384740fa83e6a7cc58216dde37010a9e0d014328484c05dedb52e611dca2c44e9ac9", 0x2c, r3}, 0x68) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x3, 0x80, 0x3f, 0x40, 0x0, 0x4, 0x0, 0x3, 0x1480, 0xa, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x1, @perf_config_ext={0x2, 0x5}, 0x42231, 0x2, 0x6, 0x9, 0x31, 0x3f, 0x8, 0x0, 0x8, 0x0, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0x2) readv(r4, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000540)=""/160) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) [ 128.895954] audit: type=1400 audit(1664626535.409:7): avc: denied { open } for pid=3833 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 128.897673] audit: type=1400 audit(1664626535.409:8): avc: denied { kernel } for pid=3833 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 128.918375] ------------[ cut here ]------------ [ 128.918395] [ 128.918398] ====================================================== [ 128.918402] WARNING: possible circular locking dependency detected [ 128.918405] 6.0.0-rc7-next-20220930 #1 Not tainted [ 128.918412] ------------------------------------------------------ [ 128.918415] syz-executor.3/3835 is trying to acquire lock: [ 128.918421] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 128.918460] [ 128.918460] but task is already holding lock: [ 128.918462] ffff88800ee89420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 128.918488] [ 128.918488] which lock already depends on the new lock. [ 128.918488] [ 128.918491] [ 128.918491] the existing dependency chain (in reverse order) is: [ 128.918494] [ 128.918494] -> #3 (&ctx->lock){....}-{2:2}: [ 128.918507] _raw_spin_lock+0x2a/0x40 [ 128.918518] __perf_event_task_sched_out+0x53b/0x18d0 [ 128.918529] __schedule+0xedd/0x2470 [ 128.918543] schedule+0xda/0x1b0 [ 128.918556] exit_to_user_mode_prepare+0x114/0x1a0 [ 128.918568] syscall_exit_to_user_mode+0x19/0x40 [ 128.918581] do_syscall_64+0x48/0x90 [ 128.918597] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.918610] [ 128.918610] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 128.918623] _raw_spin_lock_nested+0x30/0x40 [ 128.918634] raw_spin_rq_lock_nested+0x1e/0x30 [ 128.918647] task_fork_fair+0x63/0x4d0 [ 128.918663] sched_cgroup_fork+0x3d0/0x540 [ 128.918677] copy_process+0x4183/0x6e20 [ 128.918687] kernel_clone+0xe7/0x890 [ 128.918697] user_mode_thread+0xad/0xf0 [ 128.918707] rest_init+0x24/0x250 [ 128.918718] arch_call_rest_init+0xf/0x14 [ 128.918735] start_kernel+0x4c6/0x4eb [ 128.918750] secondary_startup_64_no_verify+0xe0/0xeb [ 128.918765] [ 128.918765] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 128.918778] _raw_spin_lock_irqsave+0x39/0x60 [ 128.918789] try_to_wake_up+0xab/0x1930 [ 128.918802] up+0x75/0xb0 [ 128.918815] __up_console_sem+0x6e/0x80 [ 128.918831] console_unlock+0x46a/0x590 [ 128.918846] vprintk_emit+0x1bd/0x560 [ 128.918862] vprintk+0x84/0xa0 [ 128.918878] _printk+0xba/0xf1 [ 128.918890] kauditd_hold_skb.cold+0x3f/0x4e [ 128.918906] kauditd_send_queue+0x233/0x290 [ 128.918924] kauditd_thread+0x5f9/0x9c0 [ 128.918937] kthread+0x2ed/0x3a0 [ 128.918951] ret_from_fork+0x22/0x30 [ 128.918963] [ 128.918963] -> #0 ((console_sem).lock){....}-{2:2}: [ 128.918976] __lock_acquire+0x2a02/0x5e70 [ 128.918993] lock_acquire+0x1a2/0x530 [ 128.919008] _raw_spin_lock_irqsave+0x39/0x60 [ 128.919019] down_trylock+0xe/0x70 [ 128.919034] __down_trylock_console_sem+0x3b/0xd0 [ 128.919049] vprintk_emit+0x16b/0x560 [ 128.919065] vprintk+0x84/0xa0 [ 128.919081] _printk+0xba/0xf1 [ 128.919091] report_bug.cold+0x72/0xab [ 128.919113] handle_bug+0x3c/0x70 [ 128.919129] exc_invalid_op+0x14/0x50 [ 128.919146] asm_exc_invalid_op+0x16/0x20 [ 128.919158] group_sched_out.part.0+0x2c7/0x460 [ 128.919175] ctx_sched_out+0x8f1/0xc10 [ 128.919191] __perf_event_task_sched_out+0x6d0/0x18d0 [ 128.919202] __schedule+0xedd/0x2470 [ 128.919215] schedule+0xda/0x1b0 [ 128.919228] exit_to_user_mode_prepare+0x114/0x1a0 [ 128.919239] syscall_exit_to_user_mode+0x19/0x40 [ 128.919251] do_syscall_64+0x48/0x90 [ 128.919268] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.919280] [ 128.919280] other info that might help us debug this: [ 128.919280] [ 128.919283] Chain exists of: [ 128.919283] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 128.919283] [ 128.919297] Possible unsafe locking scenario: [ 128.919297] [ 128.919299] CPU0 CPU1 [ 128.919302] ---- ---- [ 128.919304] lock(&ctx->lock); [ 128.919309] lock(&rq->__lock); [ 128.919315] lock(&ctx->lock); [ 128.919321] lock((console_sem).lock); [ 128.919327] [ 128.919327] *** DEADLOCK *** [ 128.919327] [ 128.919329] 2 locks held by syz-executor.3/3835: [ 128.919335] #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 128.919364] #1: ffff88800ee89420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 128.919390] [ 128.919390] stack backtrace: [ 128.919393] CPU: 1 PID: 3835 Comm: syz-executor.3 Not tainted 6.0.0-rc7-next-20220930 #1 [ 128.919405] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 128.919413] Call Trace: [ 128.919416] [ 128.919420] dump_stack_lvl+0x8b/0xb3 [ 128.919439] check_noncircular+0x263/0x2e0 [ 128.919455] ? format_decode+0x26c/0xb50 [ 128.919471] ? print_circular_bug+0x450/0x450 [ 128.919487] ? simple_strtoul+0x30/0x30 [ 128.919502] ? mark_lock.part.0+0xef/0x2f70 [ 128.919519] ? format_decode+0x26c/0xb50 [ 128.919536] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 128.919554] __lock_acquire+0x2a02/0x5e70 [ 128.919575] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 128.919597] lock_acquire+0x1a2/0x530 [ 128.919613] ? down_trylock+0xe/0x70 [ 128.919630] ? lock_release+0x750/0x750 [ 128.919651] ? vprintk+0x84/0xa0 [ 128.919668] _raw_spin_lock_irqsave+0x39/0x60 [ 128.919679] ? down_trylock+0xe/0x70 [ 128.919695] down_trylock+0xe/0x70 [ 128.919711] ? vprintk+0x84/0xa0 [ 128.919727] __down_trylock_console_sem+0x3b/0xd0 [ 128.919745] vprintk_emit+0x16b/0x560 [ 128.919763] vprintk+0x84/0xa0 [ 128.919780] _printk+0xba/0xf1 [ 128.919792] ? record_print_text.cold+0x16/0x16 [ 128.919807] ? report_bug.cold+0x66/0xab [ 128.919825] ? group_sched_out.part.0+0x2c7/0x460 [ 128.919843] report_bug.cold+0x72/0xab [ 128.919862] handle_bug+0x3c/0x70 [ 128.919879] exc_invalid_op+0x14/0x50 [ 128.919897] asm_exc_invalid_op+0x16/0x20 [ 128.919909] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 128.919930] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 128.919941] RSP: 0018:ffff8880204cfc48 EFLAGS: 00010006 [ 128.919950] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 128.919957] RDX: ffff88803f39b580 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 128.919965] RBP: ffff88800d060000 R08: 0000000000000005 R09: 0000000000000001 [ 128.919972] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88800ee89400 [ 128.919979] R13: ffff88806cf3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 128.919990] ? group_sched_out.part.0+0x2c7/0x460 [ 128.920010] ? group_sched_out.part.0+0x2c7/0x460 [ 128.920030] ctx_sched_out+0x8f1/0xc10 [ 128.920049] __perf_event_task_sched_out+0x6d0/0x18d0 [ 128.920063] ? lock_is_held_type+0xd7/0x130 [ 128.920076] ? __perf_cgroup_move+0x160/0x160 [ 128.920087] ? set_next_entity+0x304/0x550 [ 128.920104] ? update_curr+0x267/0x740 [ 128.920122] ? lock_is_held_type+0xd7/0x130 [ 128.920136] __schedule+0xedd/0x2470 [ 128.920153] ? io_schedule_timeout+0x150/0x150 [ 128.920169] ? rcu_read_lock_sched_held+0x3e/0x80 [ 128.920189] schedule+0xda/0x1b0 [ 128.920204] exit_to_user_mode_prepare+0x114/0x1a0 [ 128.920216] syscall_exit_to_user_mode+0x19/0x40 [ 128.920230] do_syscall_64+0x48/0x90 [ 128.920247] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.920260] RIP: 0033:0x7fb2c21a3b19 [ 128.920269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 128.920280] RSP: 002b:00007fb2bf719218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 128.920290] RAX: 0000000000000001 RBX: 00007fb2c22b6f68 RCX: 00007fb2c21a3b19 [ 128.920297] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb2c22b6f6c [ 128.920305] RBP: 00007fb2c22b6f60 R08: 000000000000000e R09: 0000000000000000 [ 128.920311] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fb2c22b6f6c [ 128.920319] R13: 00007fff78e5e63f R14: 00007fb2bf719300 R15: 0000000000022000 [ 128.920331] [ 128.981848] WARNING: CPU: 1 PID: 3835 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 128.982478] Modules linked in: [ 128.982702] CPU: 1 PID: 3835 Comm: syz-executor.3 Not tainted 6.0.0-rc7-next-20220930 #1 [ 128.983241] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 128.983986] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 128.984356] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 128.985546] RSP: 0018:ffff8880204cfc48 EFLAGS: 00010006 [ 128.985906] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 128.986381] RDX: ffff88803f39b580 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 128.986858] RBP: ffff88800d060000 R08: 0000000000000005 R09: 0000000000000001 [ 128.987346] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88800ee89400 [ 128.987825] R13: ffff88806cf3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 128.988303] FS: 00007fb2bf719700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 128.988832] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.989231] CR2: 00007f6eb0d8d344 CR3: 000000001a27c000 CR4: 0000000000350ee0 [ 128.989705] Call Trace: [ 128.989888] [ 128.990055] ctx_sched_out+0x8f1/0xc10 [ 128.990331] __perf_event_task_sched_out+0x6d0/0x18d0 [ 128.990681] ? lock_is_held_type+0xd7/0x130 [ 128.990979] ? __perf_cgroup_move+0x160/0x160 [ 128.991289] ? set_next_entity+0x304/0x550 [ 128.991584] ? update_curr+0x267/0x740 [ 128.991862] ? lock_is_held_type+0xd7/0x130 [ 128.992160] __schedule+0xedd/0x2470 [ 128.992428] ? io_schedule_timeout+0x150/0x150 [ 128.992749] ? rcu_read_lock_sched_held+0x3e/0x80 [ 128.993086] schedule+0xda/0x1b0 [ 128.993330] exit_to_user_mode_prepare+0x114/0x1a0 [ 128.993665] syscall_exit_to_user_mode+0x19/0x40 [ 128.993992] do_syscall_64+0x48/0x90 [ 128.994256] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.994611] RIP: 0033:0x7fb2c21a3b19 [ 128.994869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 128.996082] RSP: 002b:00007fb2bf719218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 128.996585] RAX: 0000000000000001 RBX: 00007fb2c22b6f68 RCX: 00007fb2c21a3b19 [ 128.997062] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb2c22b6f6c [ 128.997540] RBP: 00007fb2c22b6f60 R08: 000000000000000e R09: 0000000000000000 [ 128.998016] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fb2c22b6f6c [ 128.998490] R13: 00007fff78e5e63f R14: 00007fb2bf719300 R15: 0000000000022000 [ 128.998970] [ 128.999144] irq event stamp: 668 [ 128.999373] hardirqs last enabled at (667): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 128.999993] hardirqs last disabled at (668): [] __schedule+0x1225/0x2470 [ 129.000545] softirqs last enabled at (312): [] __irq_exit_rcu+0x11b/0x180 [ 129.001114] softirqs last disabled at (301): [] __irq_exit_rcu+0x11b/0x180 [ 129.001677] ---[ end trace 0000000000000000 ]--- [ 129.177318] loop5: detected capacity change from 0 to 1 [ 129.181604] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 129.282848] loop1: detected capacity change from 0 to 8192 [ 129.285243] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 129.460827] loop1: detected capacity change from 0 to 8192 [ 129.463754] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 129.486930] hrtimer: interrupt took 13846 ns 12:15:36 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='numa_maps\x00') preadv(r1, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000001640)={0xffffffffffffffff, r0}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) vmsplice(0xffffffffffffffff, &(0x7f0000005c80)=[{&(0x7f0000003880)="e98f74d4c1908abcf7624bfc6aafc19107be12dd5714484957826f5b02ad1ad3af5cb2ec895165a43313a4db4955809dab758bd66ae743a31024c5611af442750232e3dd4ea9c69a52349a249ac85811f0139a4c5d3d89f4c43c042cae81d43d7815b723689532bea8d6de00cab7", 0x6e}, {&(0x7f0000003900)="939f2b28ff13d78927c7674825972394b51ae04c864aaafc8e2efe244da2df551f48ced5217d5f623fedadc6e39e1f5a6e466cdd4bee842d3f67f00c8919476829a2db2cc114be9c1faa3c1da3ee8b741cdedccb25db7207760807f5615b3524de941d59dee70b9bca3de8472905a01cb307fc2b2a5a4ed84af2f5562cb5a532ad7ba9fddd1e1c4079d7a41e4727c948cdcf632ad4ab1fcd92a5526a09feb221d4e93ab6da79d51fd28ad3cb18", 0xad}, {&(0x7f00000039c0)="9be25ae71db38632d152e4a6dbec8c0660e0e68cf435c3fb6df20c8efffe7381075f2de51f920621d2362a6e", 0x2c}, {&(0x7f0000003a00)="76cb712b4e38a9e7b060e46915a1ddd567118cd397175de327145bf29580fa587e901d603a75fbff81e2b5876dc94255febe4e7ac078b0ad8bef7567a02d4f32c699e73035a8c6338a95afc1ae36303c309ec7cff1a0aad29c563883205235ad220a5558", 0x64}, {&(0x7f0000003a80)="3f4d284dcb0d3d1d4c224ee438", 0xd}, {&(0x7f0000003ac0)="6d6cbe28d9cf58e7154aacafdf5183986c0fdee8dcb1e772935b582c7ccec300267931e3ef64da8e1e9e17607efd7e81995d3071128cf885b6198ea34623e5a34abc02cfc7e74fd74ec6cd02e453cdd61f909b7de843e756fa26096a375584afc5bf23b9d5cf641b7ec0319451046430f069ded8c01bf21971ccde09a480b5526fdb9bb1d46b8f140af8dfb71d0bf6b8dbc58ab094ef51f9f7f4ea9f32bcd9f5a149fc5d4f18d633e49379eee4e7e061b46696705da0b053aab5317ca7b1a01a2e1226beffdded67eeca8994b962041cc1d15050905ce2a35164a97635dafc42196725b94a8906472150cbea240d7a95", 0xf0}, {&(0x7f0000003bc0)="82e604f490adc3da2ebeee920eb6152b281882480ccbe0c17a0c376c497994332671ff667b7bca658cfb659c2e94fa3edc0d2954c6c8b3a426019e4c22626666dfa9d203fae98de5843dcaeb02afd9c4207d9ca540eee0bc69cf0837a33f69663eec6ad6db4b6aa4aace092e3fde9598a372499f1d7bd8bb27c4163d8f4a8ffc0c00fed4053831c72ec07c5eb2093b5cd32eecd0984b1f488706819fd293e8b2", 0xa0}, {&(0x7f0000003c80)="92585dd7c743e2f1b615856d6bdd1b9eee031acbde24560d35ae1473d3cf28686fd8608076d4d5019b669386b97b16398d3c5a0b9517099be763169c04324cfedb61e8f629b77ad9f40a3d93087bbf1b6a47191dd6d5c46e84e3f27a4c8eceeb67dbaf33dd9e823c6a5ebc846a931867fe4d0e3ee03a6833e9919099cbb296e2c59d0b892e3c3a84e81ad5680a9bc69f4e984114b295c2a42bcfb82aaaff8a435a91f7667a7317a2491fbeb89ee9fffc07b01df4e23de48dd82b4fd7278f2ebbb9f2623dc4f4c341f8a510fe923f0d4552ec25f71a83fc52a29b4fbc7e74545abc3379d30538f5871663087c72ec71db8df3a44f92452b3efef80f39ac6f5f277287b2d9c28fabec24e98e95b779281ff3e01e2adaac96afc8d6a621ea532103f4e92a2336167adabcfa6e382da89f8c83ed989115c8d83a318bd0715e79970952ff0938143998beed563eb24dd89ddb13e559c8ad46c37191cfd0c7439c6a1014613b04bc08919d64252deed79ca6a51f4b6f2821c186629d1fc553f4c834c8bba90240ba87ec094d18a3b657ca908349b368951ee89e3fa1a9eb26b99af7a843a0fdeb8be770bee64537dde3f589908b7be1c2519f809238b82e5f3a85edf38cb574f722a12c769b8e407bff401176c784d224b7d12c308b71394324043e73c1cdb78a8416e9988037968d988b9da82084e61df906d642aa78c96e5b1cbe74d577808ad4d00f1740add2d35a290b056861676e439297e28f6453f5d3a4e4fefa3e4bc3d4a8b5c5efa66c3ec45d9dc0206fc2e64bfb2cb769068a6b452da77492bb1e5fc0d54436ec3bc72c458d6667a19d1e52c01bbb3891803ef1f21df42f3470bd210b90387987173d3ba55e3b59142f2d19291216c74c799901beff04167d7fcbe5fdf7c221c930a67ecf0a02c10515b49757c423d36c63b4a7e8a4c96be532a9914c98c1934ade3cf3a178b561ef5dbdd4c14f56f4a1d8bf846cb2e1f06c3aaebe61d3dbebf0f43c99f353edec419bf354328ad415082c270c2e9622d614d30e0161f256154a60da43dfeaa48d0c03e2692046ba14683861418d23cff83918eb619110a91f61693168585a18c625f36b63c8b85ee7429085f96388e4c5f8cb9e2c6306d39087a062e535e0e936eb20366546d1fa58603e62eab219b759f39943c71e4082421b7282fc57b7083467370bb1a5eb13432ffb74739ca5b5d9ef5377e0e16c07df211f15f66a1a3de810529b97cda24000502d39278fc6622f423f53642fa4edd2c2bab1c6aa5d8c87031611e0add531f4ad99a205f8661354c00e4ec9d1f082112aab1602808680dc503efb57d80f0953631ba680900c88cac32b617add53edba1acfc696201358003cdb63d080e835780ab6473162271ba89544dbaedc1e94222dabe27fd6be196c8a7d682ceaff32f7bf368693ded692e72e0aee6d519005a05aa016453617b45b731bdb3c0012a3e1d88fc86cee464ea47b99eb8d04f42ffa76830c843974ffac4acbf055fd8f375f02c1e386ea7354aa04a2aabb7b30697a8ff7ccfb7650c1d8dedab73ccef5822cbbe5e1de18152cdeabe8c1df82b40354f101cece9da8ab1d3a56c1ba72794e97447414e99a4f1937265b15703f83682fa6bc6bfe852c87829f04259e5f5b5c57d94c25f7f451d21f432276d1b6f20c1e2f74c6e8925fcdb5f2df610fe48c281391699c081f75b6b44d0d5f07e81089906ba0564bdfcc659df9f1458b8df31b3a33b3d085962429d58008c060c84209ffa9b134163c64e921be4adb337200f20086e253cb24a029fe9f330eb4c4ab937cd6fc2a280b94388244ecdeb0bda785a778192482f81807209621da3c10dbfe93d61528bcbfdb32903f6fee1d18d90937269e8f3b1a5c4b148058cd514853a581c0dc04c2708e0160ade60bcb023544d1b3f038591e4649fbf1ca3b494d7715e395ed4e393930dc51d1164b8998e09c46e576fb3156826da3e9d98224c04609d637a65a4ac9848604585dc05c4139dbc96e09a71e173d857b1ce2cb44dee19e77c95b497caefc853a564fd31bbdca363c19a3e7628d4838bd0869bf427beb6c4a33a75f07235d5dc607e8a42daa2811d9bda4c8e51241fca8dc4c55742f7ac5ddf4e57a7ae322ac2cec91e96e36fa36b7984cb62d7d4fb8aa300c14ad23f5111cac9ce4d451a47c7a3d9a8be6c3cefff6977c7cbb34945efbaea666bb04aa619f763fb04595501844fbf9f25a254654084a1d468ae4db84c8d41a1dcb3cacfc37e2081d66f934c8d591e885b7517a4b64b74770e29903762f6b9c545c5c07d59f71c9366f70d2a2bc17cc063b5bf059ed735e593c7f87d557ebbca3507ec7da12caf2fb34a6552fb76ed92f80b4f8a50b981b2c44be1d2f8ba703183c8caab46ac03a041e6fd9166455d31f993a610e5a5daa3a6192dadb3022182f55d0c11e273de872850a38667314ca2332bbca82b0be4890fa573d9484221c58e4b01257b89629a34d1199c49bac02eab4d08bd29e2a1adc6ecbb541f04e62629f614318662b5e34488c4b04ab89911cf8394c09a38648a504490759ca889da173f74d5e6a96eec85c879a3158ecf332f3ae1fe5945346c4466abf25984cbc5aba9c2e45feb97e3482eecdfc4213b04d8fcc2fad821936d34106233367099f9c4a62e4f72160e26f7b77d186bb1b494d1103e2ae4eb8964c2e8778f338def109161759832f039c1a1918b21814c6dadabc2988fe00b0592d1691f26aaf103b2b77d4597965e79cdd9dd3bf7edd71b2ce1a72d17c675bf9932264b8d4072e901d6c114f45a447abe473926e2cac476ea2c7356c07049d381ac90778dc4f4c97eee478c4a1ba5619925a7edd42ede1e3799a1e8bdbc5c13d47ba8b9714e07e7847c9966f039bfa73978b6b51f09840217d1f69977f310a13c1c291c5080d1449d397e4a6963c4ae550c961a7ce60b32dca4c9c08261c0f5ed4db9d83420ea44167616e74fcd97acdc1a76917eb122a352b91b4d3e5dd4a70acb1d2a7782d4e275d7184dd4c591ffe0a25e6839d71029586601862db8f9edd9da310d5cd3462820551bc6581248e69dce27e9fbcef31d04b2e5d6c62ce4d4a26fff49c7bec2fe3a6176825bfe109cec0274a5ac7fb9795f37df21fbe31ac577f77a149efea79c60f2b214870ee30916804f50674ebd335cc785c6a3db903a0e764fb68c61869ebbe208f0f7ed1f7986dc01f36304b297b17a3dc1ed039d5835d5078ad68e9f0fa1f0544d2f59c00c55bb793a2fc6ab49d12812ba5c9604634d52a66468212b16f774de188bebc1a7c98cbfaf7391cd7387b8f6267565585dbdfa706f62bf17c0b117a5ef4c0bc46b2ace674621fee108ff638ed401227f4563b8c5dab0739748cd48cd4cd3a113c7eb939fcd75202be6a2097bd8d80d2a2c402532d3f4e260ea4087dad77cc727d6639243e422db9279476b471a1fad46b52b046a1a43809ab8c8ae85da26a1c4c81cd15ccf1de8e9d7d73724616a8d917dc10c74a7ec2d19b34e05662e9401e131cd3f74827050a34c7d8130dd09629857dbfef7ce83e53dddc4ce4d2e09941551dba0017137c8cf244a7e8a98d102f2b24aeffb289e5408754f3ebfd5683b8d6b3213110f78ada9cbe1492d7c139519593e8c07068a92bfbd10923d17049110c2aa7679893f3c9815336adbae88d5cf53446a044d74686b3c61df4540321ad6e18355d8549e30dd4f6a62f063ab981fa8d6c387e89429d6757588da7f1dc0d9a8ce2a7de4d43485bf2ac3e2353ff4425fd404aff05e4674b9202043d54cacbb7f38e64fbfba00153d9f0a586d494dbd15241d7a88050d2fb8ff5e4286d7b74a22cfa195d8cb6623ed61d3fbc427fb48cf9339fbd451f2db6faeef74f9370c7d72102f64be8f0c4662194f8b83d78defbb1c0e4cc155b678d391894788ef42492615f3d8f39d87023280ba95135aee68b7c1dae9c9200ac70985b100e686e19fdec4cf9597a847dd67ad2e50bbb883010562ac27affe104a1abe936da47af6ae2fd97ddc7e5547d61c74a658e0f294cb2f38ea3d05eab5db54074c6bd39ba84f463f565d674237001ca6af912243df631cc68ad0bee32d307f4fceb02fcd6b947564500da7af4f63a79d88332715222416fb649ed6060f5b7d33f8dc7e21019c1bec93b413821bc9fc722646c94a94fa6979a945a27ed1d0d64544f994791da8e7e38b639c76f6061f2c7e3253a9570cbdeb858c565c62aef1363f10df654bc33453230771047dd98d692ac85d065128cda752f36990efe686f9f427085aff64534d6fe26facf83fb03ed893673635f7743a700e1c74283fcae11684cbb52fb685891e9a07a219d29e30aa226b64286f60db396781b4b1fb1b6d034ce4bda9c4ce44d73e97f0a15cb79bef707717134e7a1ec14c60638315aaeac1c4527507e6a6cf3a6b64deb9da15c281e53cd68e6a9a362a8eebcb5aac5f4b6675095dc13aa52fd78a496c9ce921c86d3ac3b4d6c4d2f16b56984a6efc8449daaf47c825e4de9d74edce12ae149ee80fa76543e054d075e0d1388bed483bcbb76688e421867dcf520dd3e34c113b3945a8953c88b68fbb6b6407b64d6b8b97f6fd402482ffcad8597a509ad221c9c5286440c3a79b9749031355c7792709adbd0004f9c1d061a3e712bd69a62d85914251604618149870b7e7e76cccb13f1e715f7b1e7058c725c058d972a815a1aeecdabcb70dff49bf84f2ebfa8d79818db5a36977e1aa8f804ff7f68dfb24146af8972472ad54d0cc81a8945e7974fe40e3785fb95039646de7b4e9e775b5a6558fd52f40edbfa871a9038b7f95c36fd6d3787c2e666d3f59dbc2272398c2597d9c123d8c6ec6ad4147778869a6a797c53611b5ca62f6ae50dde9abe0107b612aa2bb91dc83451dc8ca7ad873edf22bdb43d3331d93369436c358236f8c09fedb6cd9ba58574e4d08a000e10123bb60f9e9657600c10e1adfb913134729f4f913db1e12624899eb2f773f706fe65f65c2919695425fc3783b0d1695618175993ff4765aa9f43b5a0af999818f3a7c72ca8ad6da7deefff813e4546edd72ebedbd50d508c22b2e344ca226b54c21995bd0bfbc3ff87a42426cc6f5f759d40ae2bc4602b9baa0bf41e283a988e674821e0881f0e223e700a230aef1458c9e29a3c6e44aae95b0d463e47c0439022740a6bcda4b8a4ef76348c71bb0b5954234041a094eec948dd74868c15d76e92eb43f5cba80dfd7412d0b747fef7829b66e338735ad28c918dd057fad3e4d2f05bb6632ff052099c33a1458243f49925e03c4bdc080b9c1782d7cceb5bf137e1bdb55555076378b82fc6e1492f97d7dea4583de24bd2a4cd5a3ff8636515d7233ae4ed3b312d638471737600d35422e847537656a06da85a73039690c359282b9cd3140967d5a8c2061faac08dd7ccda065a5b873200363346eab5387ec0abc38fe73d4aa90f98bc1e6068db702b1977deb5e7445008fe794118b55801cbd7080edb89fbc5b0c7b9b026338f541032f03fa235069f236fa387f716a28865e124dcd4825266f691eee77fa343d5576d127d8ef83978702983e3122cdca07ab331ed3b1c9cd62b6ce3f1d578860c7db720d331f27f3df038d3c21e99d2d043de1aea4af26ff955689027d4afd348725c2e4ac00e6081e461e597bbbbd6bafaeef55bdea98263caf202ea7874880dcd2bc306548f1778df29642303db58c1b531415821ab9efda778d437404cd6fd2316dfda4c8e18f44ff698d64d001dae5b93010a", 0x1000}, {&(0x7f0000004c80)="8ad146dbc3b670cb12fa52e8ca8a8ae2a50c5a1ca6d7aaabcf9de9089015f9f2de920d4614f4e64769b3334a132125ef2bd034225ad057dcd376297e6d3bdf01aea52efab1c4c986c258e4ee62a1dad1606f4f0a6e51d5cc276c03dab76b4ae37347025ea209355be8763d10e3b7a990a3f21844d22c4ac5af2a1986a73b9af4fc78f7cda80ade9b3b1617f3e018ff7dc772d578d80ffeb31e9ae40041b3ba128d5f2ea8dee62988e6290cc1b427b83619e2b175d7651c6f16d895d038b68eb21926d3d719242d77e1144f11359d7f3e702c13cf777104895f7c601607fc20372476543b35da4ad95044519825909505708a3806a48e3a20bbd01372963d7c7e6bfdec2a391cd043124780743e55e110bf26e8c9b28fa2cbbd4adb109d20df91451dc589e38720d942a67c8e60cef844c5825f68850c574b5c41d76d2f015c561c8f55a596d1d12b30f55f70d1e4927f6f56ffa2fe47558ce0ea8380c277ab41a70832562a181162a4f4470a3413f37de4a97a49495741b41c943acdf72001529f3cae36a53b08baf0c8a1f83c8f80eafcfbf139e65d62e067131e26ce6913c42d8f2b859e0c9e52c3508b24a277ba5936fc02b6a0f488b1eec84ee89537791e2dabd199f57ba9f2c784eb135e30ef062242a9b7ea4500cdf195463c4c52395669dd1004a5eff71107179c3348f97b5e285c49165acfac1b1d2f5e3ce217008e5bd81a60db5461829317fe5e32a49efd62cce383e5f5f28b3e003cdc52e8d844dab228d3412718b099e80ee1642c3857716e82e88dbee0e28f74e8d4af0c6cf6eb3e5697a8d1e3556e7321b2babd1950a513282cf396ee7f86c4f76975d9991c50b631c3586e12688733d34e0a4c59504e0225d82dd4c4e1008efcd81f2e06d10ff1ef8e3e2f9faa684fdf4eee1d0f2d23d35e0906fd17dc301a460f341b912e902af5a3feafe425384b0181c7a93b74347d9a9ad673d8c6bfc72a4390ed5b2da0385ba5bfd65071282cd8319f3ec71d1145f0a4c63f40581ce10b934ff925ec7f1a1052c2c8e13ce4098826544bcf00c83e55e814a3a215abec17dee7020c08be560527fc8357934429f013639b4e1a710d4ef1c6f8c4775b29e73714c056b72336a3fca8136cd49f8d117279d2264870ee819f4546b1772cf9ff15dd85645ccdc6aab8c3d8983126e00c0e654511dc802444fb25e2f29e2682e5b7f0363b844e913d6248c3da01c6063835bf57e95842397fe453fb3acfb26243706eeade9e6d148c09604eae06877c1d5da61872cb536f59759b967bfbec40bd0e4f4a732cbd7879f5dad72848d1908a18f4c69a00848fccf4ea533cc50fbbccc3f872ebe37d67d3c4b3e8d67dba06d15f57836a3fd71b82a5fd008a6d0562f9d051a1916659c07c96dfcefa3120beda4722cfe321e87153f6b025a8484f032f57906710fc90f4c4f4f4b2f666663710ba56a15b4205c10da51c8535465c9212864addba7bc643a6436c6fea8cfb463d466804c779facded8d42a9e05e69e6c95dc4b2288f2681f2278f3c57b98ec92c470f59e38cb917dc048770f3b560851cee2666d36cb59b852050866586b524e0185c8e349e50311523573b4e180102e38b1d979bc40b6b0dc10c6babd3b8c044a79da742500df0fc19c740303d7a7051cd6a120e5e09aa0602477eebea6e0ef278cb689b1940e5a46d8bc957ae0cc8f900f18de2ebb6b6532562fdbbc3f8e20ad71051c339e5a23f019977c9d60cb7def18d5d547a31c6aac0d49cabf3bce4b0e8ed61cfb53ab8ca8393f7aa2b4b66cd0e62b4fd734cdd1451a6944ae1945184f701ccdc45792a8e9b67cd79b52d917ba0a7b1cffc7b6166cc7b6df75d7235c3b2c511faccc1b7e76c83adc7076d07d98c3f8df146930a1fb05624e6c568f20c1ea993b3f1ce7b6a06cb325203a5a6a714491b62a2e3be3fd987df0337df5198808a7480457a038d4b1914fec0af9d5bf5d9b34657d4f42ebe37c40feea513755c5d43df0cb28d0b5207bde3d7ccb7d6222d01031016b7a8c0f26072571d867fb6127bef8f824ea62be4391c116c54c6e3af06ede9aa7e48ed3065cb1db544feb857dbe62425359aa7209ccc6d263b5379c1eff0314e72aba04f477d5153291585090028a8e98a3c4556509798337af20033618e8d2eb3ada55bbc3f7cbbd67fc1d4fdb4820319d2fea5e259599c61157c6aecaf59ac4dee41833e4b33bcfff1d22312f1a617fd0663cc06dafcbf6c0515535778538c3d4dc73b7ddfe8c5474efc5b23afd9b7e701cfd5ff6d36c8974a9d85ba8f43e5936f5fb9c198b93ab660feb5a55d6863f0645c5ebc2560caf1d7e25d44f046892047f9ba03a0fa07ece3c4faa02c4025c2817067172279d56f71390f85d3058da5b49a8e5e7672a0f9fee57b118ebd27f2bb3030e516d2dc3a75a51ce6e8a42a086ff6b24abfd2364c6c2271e3a43d1bc0a29f287f7ecd1f98cf1b50f3a0f19032f6a613cc70842e6ae3f020033ffd214a8c73e18084f8c2a4f67f97185e3152f08d83c4423a06a625f2be69ce7ace73d220386fb26a4b45b4d7714eb6e96a38573f34fc60a6513ca73825cd2d2695fcec4e88b94d1557eb9af07f2f788c226dc1bddbff78f997e17054f377230cb20c57c0e1bee6a82b4f9255b1b15997fbb7cc39a7641fe001874c8e4b6962ff096e742ed72c3277c64ab65708af85a1d9c9cabcdfc9551997958ea39df45810b1fe708dcba7820a0e01e1782351ece7c04b4472d8944ddd8a6be18d1acdc376a281f7ab7fcde1621c18480e4800ddb3717b67cb430f341df52374baff199d2b62a8b753880bb10a6f6f924245d5b83b7931497ed964386e24e094f52c5f2fff527e9b85fe64f6a33c3c048c10f2231355b5c90a7ed453d8a27e415b08fa87a8e180f81c72bce154a65b6c08a1c556b8254dbbc0519e3acf208f436d2e4c35db0fa0d3ff60d1c8cecc8c9020f915bd5e7407a88c9ecf369e68810020fa80582076ada907142b97102c11d470875505b03a66b9fc1b9dfd626302ce5429af65dc9b1589cbdf8abd797d639dc8f93718bcac565db6b116786633c53c887b1aa02cb9d6d02d89e5a452d9049ba3f7f46cac9dee4b38c848866ad0554fded44600c59fa84d1447d70284a522b57f13d55d075c35f1566541659a9dd27946c3ee5e451761e0c32a003594e8e6fb57184409e4b483f0b10d8cacab115b53563ce602f9603bb3b9e6f186b1439451ce05b233358df73236145dda6844363be9072280e13b4771f93b63ea25b4dcf4e678efe32cd2e9efefcebc7cb38af3c78e7a856993d3e5ef5ae9d11d07efb95f5fbd22ec266b42977a122c414dfc366f8040fd54bb80bf931c6e1e542e610d777fb813de8a72673a2ccb56659eb7520493da56cfd4240d87f26bcd0749a818d93fa3e098d014f254bec73f300fb5249bc396265eadb898a4e56fff2bd051ceb6bcb8f3a7c3997b94ab2d02df3c344a588f1b1b011fb8f4ae2cf6aff1b2b962ab018f2eddfc7d6be2f47866b7040bf1b100e875d56675d064c98398b82be5532981f6498f370fe11ebf8d801acd297689984c7055bbe22510bb599097baadf2d476a828cdc245a4ad8b4e34ce111c25216b9bc829d5b785a3b203f5bff6818c4483eae5d5f25da213b4096f81df492997f400151a46d58a3c77fa7fc6eb231d350d6432c0e2c51c64c9be214041e784ae8bbeed213fa407c796de08d07e8901c280736411a9704aca11f1c1f6f6ada268807a3fbbc00a6b83ace9acaa0cf9235ba658300ef422dfced990a69c28d8eb85088cd8bca871e8f1b590900efc9c454495d85385d3b5612542b5a69e935151eeb03c10131e704382a8d7c5120b4d09bbe0e420cb3b8671f1cac9f41255b488b7d5b0f40a79110736c17f35e03567a9baaa38013281bcd28715dffcfeecf022dba49c9775490edf0fa7a531d2f3d1c51a818cb91cf2a92d5ed904e0fa6710fdd0a9bda8ee6c6b92b9f46251b87334d2a43541f8cf850ba9dc09f469905cc9fad20871492bed533d653eb43e0369c54481af380afacfc9c53c4a03a62bd846777471f3662c201e78d64aba45d383d53952b33ef223af36d73ddbf3b97114b5c5ebcaa2f4454cf1e1430575dbe7abd3a289e06f5e6b8da9f95a5268656035ffc1b2d52bc2c4e2da113ab7aaaeae8be1384a432a79fe27ea086203e2d2dd0b320bc685932c0f0592487d936109d5ffa0c9d1a6c31a9a8686aa704dfe3c63c95d529c9537b3f5f0490d635c97d13dba6d8dc75ab549c41f6c66c6fd01af459659026c50d197afea1a61b8f6150acc50baa6de9498445a0fc4a28b3daa846d073d2954359c8dd8d4e7585a5588f692b4cabbfe5fd79ba46bd84d87315b1a55c465e6d28dab165f44566f725fa1ad9475aff37bc85101813acf72fdf2bece0b2de04fdccd1f8dc5dcf5da8195da9a60d9cb1bee1c9ac02871c5cb04247f8857f0a9f7a5ee7c67c8da34da8a41d1b2b0f2a0f948d6b078e6a2ef04964d74f7bb30d46a9689f68aa44118e67155d22f50845234ce1608eca489fe3edaf9d9ebef950f8fc309304cb8a32fb19e410cb250670cf58c3ae9a4d57f4f5c5a6f55580083a2094a4be57edaa5f1095659faa9485dedb9f9f4c546a817cf17e7f40334f916a5f395533371f135075d1c568d0fabe1dc9e9844a4566a644c40a46d9cb39e1da1a8571aa4ab63ca52464a6302bc90bb10f80a385668c95f46d82223499a4b463c8191af54e214b6730e0e06673b50bc6d20900b8fdd971c17dd85525ba09985988b981860c74b8f1ade19a22491c2dcf2fad169863c806f0a54b38675d50271d69cc4acc4882d93037ebf677537fc8cc24e2ce6e64becd38410e37eaa610e79ed7302ba1fdb6539df54434b8b786081745519ce94f05a6e06543074fbfe0797fcc7a6c17c340dc202d589953fac6ec5cf624302fb53fbef7b6d8d92fa7ec6052cf8c02e2e2ef1c6609361d04a3c03d3252beab9a9510c849e4c5bbfbf5bde481e9f8e24b68928822909ce91a2b1c0da4ef036c0cd3299dc3e6a61fe286b1adeeda2232b70b35cfcadcad4067772b23fe6724f1b353f31e974c294489f6686ee0eac8e41eb4b58136ca935baf58655b8d404dc47f81901801d390c0fb5acd2a9bfd97162a23ec8b27dcfd39a5d28f0532c761f305cbad60f31a61cc32792980006472f6df75f1067c764a93c7c078acc2dd4fc9b4769f405e18ab01b82cbfc627295dbd8fc45904243f670842c3fd7be6d693c53bca11634abdc47011997a540d05123395c59cc504888e90b0f5cd7d3b3eae34082a5a5d38e07fa091e969d18bc7450bf69c32e30c905ae5e44aa7167ff75ce70a714d1e0cbf6e0d6c7056cd83ebbb5e0444e93256a0fa12eee10e0317cecb697115b1327c10403a87d9247d06a12fa660c85d5c98dddab6eb079d327d479dd0dcf4633ab590839295e77f5544930be359a10e423f2cb1c8ff1e8c373a707a053889462272a539e38efee9cfbab6a5810b9ea4f09de398f9a1f618dae48571e15b80ca314f2223d704efc4592fc8390c4dbbf8428567b091e80b74da9f9117f85d5c1be5740ea88f2d7c74ec74ebe83507d5c206714ef911757d2886a8203a06bb59461a720c949cc24c5c46f4905819c1b07303013c57f6c93dc74983ba1bba975ddc8d6a4fc0e5fe112cead6f7796a8c9b039a9514e6e70411b235f66e95a370b5697b341ac8459c053245edb0130ee4b0c4eb0350e416c4e2886e12d578a49d19fbc9a7a", 0x1000}], 0x9, 0x8) r3 = dup2(r2, r2) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0xfffffff9}, 0x1c) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000001380)={'sit0\x00', &(0x7f0000001300)={'sit0\x00', r6, 0x2f, 0x4, 0x0, 0x5, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x80, 0x20, 0x5087, 0xffffffff}}) ioctl$sock_inet6_SIOCDELRT(r4, 0x890b, &(0x7f0000000380)={@private1, @private2, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800086, r6}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@local, 0x7a, r6}) syz_emit_ethernet(0x4e, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRESHEX=r6], 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008080}, 0x4814) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f00000011c0)={'ip6gre0\x00', 0x0, 0x29, 0x7, 0x65, 0x101, 0x0, @remote, @mcast2, 0x8, 0x7, 0x5, 0x1}}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f00000012c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000001240)={0x54, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x44005}, 0x8000) 12:15:36 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0xfffffffe}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xc, 0x1, 0xf9, 0x7f, 0x0, 0x1ff, 0x58200, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000340), 0x3}, 0x1, 0x0, 0x9, 0x3, 0x6, 0x800, 0x2, 0x0, 0x7, 0x0, 0x401}, 0x0, 0xa, r0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000200)={{0x2}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000440)="af98e2d926f1da31eaae384740fa83e6a7cc58216dde37010a9e0d014328484c05dedb52e611dca2c44e9ac9", 0x2c, r3}, 0x68) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x3, 0x80, 0x3f, 0x40, 0x0, 0x4, 0x0, 0x3, 0x1480, 0xa, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x1, @perf_config_ext={0x2, 0x5}, 0x42231, 0x2, 0x6, 0x9, 0x31, 0x3f, 0x8, 0x0, 0x8, 0x0, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0x2) readv(r4, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000540)=""/160) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) 12:15:36 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0xfffffffe}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xc, 0x1, 0xf9, 0x7f, 0x0, 0x1ff, 0x58200, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000340), 0x3}, 0x1, 0x0, 0x9, 0x3, 0x6, 0x800, 0x2, 0x0, 0x7, 0x0, 0x401}, 0x0, 0xa, r0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000200)={{0x2}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000440)="af98e2d926f1da31eaae384740fa83e6a7cc58216dde37010a9e0d014328484c05dedb52e611dca2c44e9ac9", 0x2c, r3}, 0x68) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x3, 0x80, 0x3f, 0x40, 0x0, 0x4, 0x0, 0x3, 0x1480, 0xa, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x1, @perf_config_ext={0x2, 0x5}, 0x42231, 0x2, 0x6, 0x9, 0x31, 0x3f, 0x8, 0x0, 0x8, 0x0, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0x2) readv(r4, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000540)=""/160) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) 12:15:36 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0xfffffffe}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xc, 0x1, 0xf9, 0x7f, 0x0, 0x1ff, 0x58200, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000340), 0x3}, 0x1, 0x0, 0x9, 0x3, 0x6, 0x800, 0x2, 0x0, 0x7, 0x0, 0x401}, 0x0, 0xa, r0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000200)={{0x2}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000440)="af98e2d926f1da31eaae384740fa83e6a7cc58216dde37010a9e0d014328484c05dedb52e611dca2c44e9ac9", 0x2c, r3}, 0x68) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x3, 0x80, 0x3f, 0x40, 0x0, 0x4, 0x0, 0x3, 0x1480, 0xa, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x1, @perf_config_ext={0x2, 0x5}, 0x42231, 0x2, 0x6, 0x9, 0x31, 0x3f, 0x8, 0x0, 0x8, 0x0, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0x2) readv(r4, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000540)=""/160) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) 12:15:36 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0xfffffffe}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xc, 0x1, 0xf9, 0x7f, 0x0, 0x1ff, 0x58200, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000340), 0x3}, 0x1, 0x0, 0x9, 0x3, 0x6, 0x800, 0x2, 0x0, 0x7, 0x0, 0x401}, 0x0, 0xa, r0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000200)={{0x2}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000440)="af98e2d926f1da31eaae384740fa83e6a7cc58216dde37010a9e0d014328484c05dedb52e611dca2c44e9ac9", 0x2c, r3}, 0x68) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x3, 0x80, 0x3f, 0x40, 0x0, 0x4, 0x0, 0x3, 0x1480, 0xa, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x1, @perf_config_ext={0x2, 0x5}, 0x42231, 0x2, 0x6, 0x9, 0x31, 0x3f, 0x8, 0x0, 0x8, 0x0, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0x2) readv(r4, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000540)=""/160) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) [ 129.906258] Bluetooth: hci0: HCI_REQ-0x0401 12:15:36 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0xfffffffe}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xc, 0x1, 0xf9, 0x7f, 0x0, 0x1ff, 0x58200, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000340), 0x3}, 0x1, 0x0, 0x9, 0x3, 0x6, 0x800, 0x2, 0x0, 0x7, 0x0, 0x401}, 0x0, 0xa, r0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000200)={{0x2}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000440)="af98e2d926f1da31eaae384740fa83e6a7cc58216dde37010a9e0d014328484c05dedb52e611dca2c44e9ac9", 0x2c, r3}, 0x68) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x3, 0x80, 0x3f, 0x40, 0x0, 0x4, 0x0, 0x3, 0x1480, 0xa, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x1, @perf_config_ext={0x2, 0x5}, 0x42231, 0x2, 0x6, 0x9, 0x31, 0x3f, 0x8, 0x0, 0x8, 0x0, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0x2) readv(r4, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000540)=""/160) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) 12:15:36 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0xfffffffe}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xc, 0x1, 0xf9, 0x7f, 0x0, 0x1ff, 0x58200, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000340), 0x3}, 0x1, 0x0, 0x9, 0x3, 0x6, 0x800, 0x2, 0x0, 0x7, 0x0, 0x401}, 0x0, 0xa, r0, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) fallocate(r2, 0x0, 0x0, 0x87ffffc) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000200)={{0x2}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000440)="af98e2d926f1da31eaae384740fa83e6a7cc58216dde37010a9e0d014328484c05dedb52e611dca2c44e9ac9", 0x2c, r3}, 0x68) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x3, 0x80, 0x3f, 0x40, 0x0, 0x4, 0x0, 0x3, 0x1480, 0xa, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x1, @perf_config_ext={0x2, 0x5}, 0x42231, 0x2, 0x6, 0x9, 0x31, 0x3f, 0x8, 0x0, 0x8, 0x0, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0x2) readv(r4, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000540)=""/160) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) [ 129.995289] loop5: detected capacity change from 0 to 1 [ 129.995976] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 130.789359] Bluetooth: hci0: HCI_REQ-0x0401 [ 131.959990] Bluetooth: hci0: command 0x0401 tx timeout [ 134.006952] Bluetooth: hci0: command 0x0401 tx timeout VM DIAGNOSIS: 12:15:35 Registers: info registers vcpu 0 RAX=1ffffffff0b77886 RBX=ffffffff85bbc434 RCX=ffffffff8178562d RDX=0000000000000000 RSI=ffffffff85edfdb4 RDI=ffffffff85bbc410 RBP=ffffffff85bbc410 RSP=ffff88803f987700 R8 =ffffffff85edfdb4 R9 =ffffffff85e8083e R10=ffffed1007f30f06 R11=000000000003603d R12=ffffffff85bbc458 R13=ffffffff85bbc410 R14=ffffffff85bbc410 R15=dffffc0000000000 RIP=ffffffff81119b6f RFL=00000213 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc53f7ff8e0 CR3=000000001a386000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 00362e6f732e6362 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 ffff0000000000ff ffffffffffffffff YMM03=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000074 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff8880204cf690 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000074 R11=0000000000000001 R12=0000000000000074 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fb2bf719700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6eb0d8d344 CR3=000000001a27c000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007fb2c228a7c0 00007fb2c228a7c8 YMM02=0000000000000000 0000000000000000 00007fb2c228a7e0 00007fb2c228a7c0 YMM03=0000000000000000 0000000000000000 00007fb2c228a7c8 00007fb2c228a7c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000